Add an eslint rule that modules defining `dependencies` must always spread parent's dependencies

[MartijnHols]

Not spreading a parent's dependencies leads to bugs.

It would be very nice if it excluded modules just extending Analyzer/Module/EventSubscriber, but not essential.